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Abstract 

This paper surveys main and recent studies on temporal logics in a broad sense by 
presenting various logic systems, dealing with various time structures, and discussing 
important features, such as decidability (or undecidability) results, expressiveness and 
proof systems. 

1 Introduction 



Temporal logics are formal frameworks which describe statements whose truth values change 

over time. Despite the fact that classical logics do not include time element, temporal logics 

characterize state changes which depend on time. This makes temporal logics a richer 

£T) , notation than classical logics. 

> " 
q^ ' Temporal logics can be considered as extensions of classical propositional and first-order 

0^\ . logic. In fact, propositional temporal logics are an extension of propositional logic with 

temporal operators. Similarly, first-order temporal logics are extension of first-order logic 
with temporal modalities. Temporal logics are also special type of modal logics, where 

f— n ■ statements are evaluated on 'worlds' which represent time instants. 

Although various aspects of time and logic have been studied, an up-to date compre- 
hensive analysis of logic of time does not exist in the literature. Some surveys (such as 
[106, EH I105[ I68| ) can be found in the literature but these mainly concentrate on specific 
formal systems over specific structures of time; therefore, they do not contain a broad 
analysis. The aim of this paper is to outline main and recent developments in the field 
in a broad sense by presenting various formal systems dealing with various time struc- 
tures, and discussing important features, such as (un) decidability results, expressiveness 
and axiomatization systems. 

Temporal formalisms we will analyse include propositional/first-order linear temporal log- 
ics, branching temporal logics, partial-order temporal logics and interval temporal log- 
ics. We will summarize important results on decidability, axiomatizability, expressiveness, 
model checking, etc. for each logic analysed. We also provide a comparison of features of 
the temporal logics discussed. 

Note that in some instances we think it is more convenient to refer to the original text for 
clarification purposes. In the following, we will use quotation marks to use the text from 
the original resources. 



2 Preliminaries 

We can classify temporal logics based on several criteria. The common dimensions are 
'prepositional versus first-order', 'point-based versus interval-based', 'linear versus branch- 
ing', 'discrete versus continuous', etc |46 [ 11414 H4j. Below we discuss the most important 
criteria to classify temporal logics. 

Point versus interval structures: There are two structure types to model time in a 
temporal logic: points (instants) and intervals. A point structure T can be represented 
as (T, <), where T is a nonempty time points, and < is a 'precedence' relation on T. 
Different temporal relationships can be described using different modal operators. Some 
logics include modal operators which can express quantification over time. However, a 
relationship between intervals is difficult to express using a point-based temporal logic [52J. 



Interval temporal logics are expressive, since these logics can express a relationship between 
two events, which are represented by intervals. Also, interval logics [128, 129, 103, 85, 99, 
1119} l?4"] have a simpler and neater syntax to define a relationship between intervals, which 
provides a higher level abstraction than a point-based logic when modeling a system. This 
makes interval logic formulas much simpler and more comprehensive than point-based logic 
formulas. 

Some of the known interval operators are meets, before, during [4], which denote the ordering 
of intervals; chop modality [140J, which denotes combining two intervals; and duration, 
which denotes a length of an interval [31J. 

Interval structures can be considered in two ways: (i) intervals are 'primitive' objects (ii) 
intervals are composed from points. [139, 101] 1142] consider intervals as primitive objects 
of time. 1 139] defines a 'period structure' as the tuple (I, C, -<), where I is a non-empty 
set of intervals, C is a sub-interval relation, and -< is a precedence relation. One particular 
problem of this approach is that theoretical analyses are usually very difficult. Also, al- 
though it is very easy to define properties linearity, density, discreteness, unboundedness in 
a point-based logic, it is very difficult to define these properties in an interval logic where 
intervals are primitive objects. 

|68} 174"] 1140] consider intervals as set of points, where the time flow is assumed as "a strict 
partial ordering of time points". Namely, an interval structure is defined as (T,X(T)), 
where T = (T, <} is a strict partial ordering and I(T) is a set of intervals. The properties 
mentioned above can be defined in an interval logic where intervals are composed of time 
instants. 

We conclude this section with the historical development of interval-based temporal logics. 
The concept of time intervals was first studied by Walker [143] . Walker considered a non- 
empty set of intervals, which is partially orderd. However, his work does not cover aspects 
of temporal logic in a general sense. In [75j philosophical aspects of an interval ontology 
was analysed. In [79j an interval tense logic was introduced. |43 } 180 } [1251 128 ^ 1138. 63. 1131] 
studied interval logics within the natural language domain. It was argued that interval- 
based semantics are more convenient for human language and reasoning, and interval-based 
approach is more suitable than point-based approach for temporal constructions of natural 
language. [U [5j [7J [6] studied event relations and interval ordering. The authors introduced 
so-called Allen's thirteen interval relations and worked on axiomatisation and representation 



of interval structures. Some further works on Allen's algebra were carried out by |85l | 
Recently, |126| investigated the relation between Allen's logic and LTL. Interval based- 
logics have been also applied to other fields in computer science. |109[ I114[ I76| worked on 
process logic, where intervals are used as representation of information. Another important 
work was the development of interval temporal logic (ITL), and its application to design of 
hardware components |103| I73], Since the development of ITL, various variations have been 
proposed so far. In particular, Duration Calculus |31| is an extension of interval temporal 
logic with "a calculus to specify and reason about properties of state durations". 

Temporal Structure: There are important properties regarding the time flow and tem- 
poral domain structure. Some properties are summarized below: 

Assume (T, <} represents a temporal structure, where T is a nonempty time points, and < 
is a 'precedence' relation on T. In a temporal logic the structure of time is linear if any two 
points can be compared. Mathematically, a strict partial ordering is called linear if any two 
distinct points satisfy the condition: Vx, y:x<yVx = y\/x>y. This definition suggests 
that in linear temporal logics each time point is followed by only one successor point. 

Another class is the branching-time structures, where the underlying temporal structure is 
branching-like, and each point may have more than one successor points. The structure 
of time can be considered as a tree. A tree is a set of time points T ordered by a binary 
relation < which satisfies the following requirements |59j : 

• (T, <) is irreflexive; 

• (T, <) is transitive; 

• \/t,u,v € T u < t and v<t^-u<v,u = voru>v (i.e. the past of any point is 
linear) ; 

• Vx, y G T,3z € T such that z < x and z < y (i.e. (T, <) is connected). 

One important characteristics of branching logics is that the syntax of these logics include 
path quantification which allows formulas to be evaluated over paths. However, linear 
temporal logics are restricted to only one path. 

A temporal domain is discrete with respect to the precedence relation < if each non-final 
point is followed by a successor point. This can be formulated as follows: \/x, y (x < y — > 3z 
(x < z A -<3w(x < w A w < z))) [134J. Majority of temporal logics used for system 
specification are defined on discrete time, where points represent system states. A state 
sequence, as a result of a program execution, can be considered as isomorphic to discrete 
series of positive integers. 

A temporal domain is dense if, between any two distinct points, there is another point. 
This can be formally denoted \/x,y(x < y — > 3z(x < z < y)) |134j . Above we mentioned 
that flow of discrete time can be represented as positive integers. Similarly, density can 
be represented as real numbers. It is noteworthy to mention that there is a distinction 
between density and continuity: "A model of dense time is isomorphic to a dense series of 
rational numbers, meaning that there is always a rational number between any two rational 
numbers; whereas a model of continuous time is isomorphic to a continuous series of real 
numbers" |141j . 



A temporal domain is bounded above (bounded below) if the temporal domain is bounded in 
the future (past) time. This can be formulated as follows: 3x^3y(x < y (3x—>3y(y < x))) 
|134| . Similarly, a temporal domain is unbounded above (unbounded below) if each point 
has a successor (predecessor) point, which is formally denoted \/x3y(x < y (\/x3y(y < x))) 
[134]. 

A temporal domain is Dedekind complete if all time point sets (non-empty) are bounded 
above, and they have a least upper bound. 

Based on differences in temporal domain properties logics have different characteristics. 
For example, we can consider a temporal domain which is linear or branched; discrete or 
dense; finite/infinite in future and/or past, etc. All these choices result in different syntax, 
semantics, decidability and complexity. 



3 Propositional Temporal Logics 

An important success in temporal logic study was the introduction of the temporal op- 
erators into the classical logic |81j . In [113J Pnueli introduced a very influental Linear 
Temporal Logic (LTL). LTL can express properties of linear sequences of states. For exam- 
ple, properties such as { p holds at some state in the sequence' or 'p holds at two consecutive 
states in the future' can be expressed in LTL. In [132] Sistla and Clarke proved that the 
satisfiability and model checking problems of LTL are PSPACE-complete. [132] shows that 
if the syntax is restricted only to <C> ('sometime') operator, or X ('next') operator, then 
the complexity of the satisfiability problem reduces to NP-complete. However, when both 
operators are included in the syntax PSPACE-completeness is preserved. 

Recently, a quantitative extension of LTL was introduced in |88j, where LTL is extended 
with counting quantification. [88] shows that satisfiability and model checking problems of 
this extension are both EXSPACE-complete. 

In |62| the logic Propositional Temporal Logic (PTL) was introduced (over discrete time 
models with X ('next') and U ('until') operators. |62j shows that PTL is decidable, and it 
provides a sound and complete axiomatization. In |132| it was found that the satisfiability 
problem for PTL is PSPACE-complete. An automata theoretic technique for obtaining 
satisfiability can be found in [133j. 

[132j provides a complete axiomatic system for PTL. Among the proof systems existing 
in literature are Hilbert-style proof system |85| . a Gentzen-style proof system |135j and 
a clausal resolution approach |54[ I55j . These proof systems are all sound and complete. 
In |90| PTL was extended with the past operators, and a complete proof system for both 
future and past operators was presented (A detailed discussion can be found in [1351 89j). 
In [89j an EXPTIME tableau algorithm is presented for the satisfiability problem of PTL. 

In the literature several examples of properties of programs expressible by means of temporal 
logics can be found |84[ [95| 194"] . Some important properties are expressed in PTL as follows 
[135]: 

• p — > \Dq: q holds at all states after p holds. 

• □((-!(?) V (^p))- p and q cannot hold at the same time. 



• p —> (}q: q holds at some time after p holds. 

• D<0>p — > <0g: If p repeatedly holds, q holds after some time. 

• Op — > (}q: If p always holds, q holds after some time. 

Recently, more results have been presented on PTL. |123| showed that the satisfiability 
problem for PTL with the strict 'until' operator is PSPACE-complete. |93j extended the 
'since-until' logic of real-line with the operators "sometime within n time units", and they 
showed that the new logic is PSPACE-complete. [I24j showed that satisfiability problem 
for the logic with 'since-until' operators over real-numbers time is PSPACE-complete. 



4 First- Order Temporal Logics 

First-order temporal logics (FOTL) are extensions of propositional temporal logics. In 
addition to all propositional features these logics also allow arbitrary data structures and 
quantifiers. FOTLs have been extensively used in many areas including specification and 
verification of reactive systems, and analysis of hardware components. First-order logics 
provide an expressive formal framework for formalising the semantics of executable modal 
logics. They allow to obtain more robust techniques for reasoning about knowledge |51l 
177] . FOTLs have also found applications in information systems. For example, temporal 
database query languages are mainly based on first-order like languages [36J. 

Although first-order temporal logics have proved to be useful in various areas, they suffer 
from high computational complexity because these logics are very expressive. Indeed, most 
of FOTLs are not even recursively enumerable [1] [10l [59]. Some axiomatisations of first- 
order temporal logics were studied in [120]. In some cases, fragments of first-order temporal 
logics with lower computational complexity are defined through restricted extensions to 
propositional temporal logics [Tj I100|. I35 JI1 12] . 

One important logic is monodic fragment of first-order temporal logic defined in |77| , which 
showed that it is an expressive logic with a feasible computational behaviour. In monodic 
formulas, one free variable is allowed at most. In |145| a finite axiomatic system is presented 
for the monodic fragment. In |1HI69| monodic guarded decidable fragments are introduced 
by restricting the quantification. 

The first-order temporal logic is represented by QTL, which includes the following syntax 
(which does not comprise equality and function symbols): predicate symbols, variables, 
constants, boolean connectives, universal quantifier and temporal operators S ('since') and 
U ('until'). Let T be the underlying time structures assumed for QTL constitutes strict 
linear orders. Then, QTL(T) denotes the first-order temporal logic of T, and QTLfi n (T) 
denotes the logic of T with finite domains. 

4.1 Undecidable Fragments of QTL 

In the literature, it has been known that both the monadic and two-variable fragments 
of first-order logic are decidable fl9] . However, the computational complexities of their 
temporal counterparts are different. Let QTL 2 denote the two - variable fragment of QTL 



(where every formula contains at most two variables), and QTL mo denote the monadic 
fragment (not monodic) of QTL (where formulas contain only unary predicates). Assume 
T be either {(N, <)} or {(Z, <}}. Then, QTL 2 n QTL mo n QTL(T) and QTL 2 n QTL mo n 
QTL fi n (F) are not recursively enumerable [77] . 

4.2 Decidable Fragments of QTL 

In the undecidable fragments given above, formulas can have the following quantification 
types: temporal modalities, path quantifiers and domain quantification. This causes a 
problem that these fragments of QTL are undecidable. It is known that the three-variable 
fragment of first-order logic is undecidable |19| . 



In order to preserve decidability, corresponding fragment of QTL, which is QTL\, contains 
all QTL-formulas <p, whose any subformula of the form (piU(f2 and <piS<p2 nas at most one 
free variable. These formulas are monodic (not monadic) formulas. The monodic fragments 
of QTL((N, <)) and QTX((Z, <)) are recursively enumerable [78J. 

Let T be {(R, <)} and T be the following classes of time structures: "{(N, <)}, {(Z, <}}, 
{(Q, <)}, the class of all finite strict linear orders, and any first-order-definable class of 
strict linear orders" [78] . |77] proves that various fragments are decidable, such as QTL(T)f] 
QTL h QTL{T)r\QTL\, QTL{T)nQTLf°, QT L fm (T' ) n QT L 1 , QT L fm {T' ) n QT Lj and 
QTLfi n (T ) PI QTL™°. They also provide some guarded fragment of first-order language 
(For a detailed discussion, see |77|). 

In [60] it is shown that QTL ((N, <)) n QTL ± is EXPSPACE-hard. It is also shown that 
"the satisfiability problem for QTL^-formulas in models based on (N, <) is EXPSPACE- 
complete" 



Here we assumed that QTL and its fragments do not include equality and function symbols. 
It can be shown that undecidability is a major problem with the logic extended with function 
symbols |145j . For instance, "the set of one- variable formulas with one function symbol that 
are valid in models based on (N, <) is not recursively enumerable" [78] , Moreover, "the set of 
monodic QTL formulas with equality that are valid in all temporal models based on (N, <) 
is not recursively enumerable" |78| . [30 J shows that the problem persists even for a simpler 
fragment. Namely, the authors prove that a fragment with "monodic monadic two- variable 
formulas" is not recursively enumerable. In [145] a finite Hilbert- style axiomatisation of 
monodic fragment of first-order temporal logic was presented. It was also proved that "the 
monodic fragment with equality is not recursively axiomatisable" [145j. 

Recent research results have showed that relatively expressive subsets of first-order temporal 
logic could be found. In [1441 [77"1 1145| suggest that expressive power of monodic first-order 
temporal logic can be extended further. For example, temporal operators can be applied 
to formulas with more than one free variable |112j . The decidability results can be also be 
extended to temporalties description logics. Recently, tableau-based methods are presented 
for the satisfiability checking of temporal description logics |92| . Tableau-based methods 
can also be devised for the satisfiability checking of decidable monodic temporal logics. 
This can be done by extending the tableau methods for the propositional temporal logics 
to the first-order case |92| . An alternative approach is to use the resolution method. |41| 
introduces some resolution systems for monodic first-order temporal logics. 



5 Branching Time Temporal Logics 

A temporal logic system is called branching time logic if the underlying semantics of the 
structure of time is branching. The underlying structure of time in branching time logics 
is a tree-like structure. That is, every time instant can be followed by several immediate 
successor time instants. In branching time logics, there are two kinds of formulas: state 
formulas and path formulas. State formulas are interpreted over states and path formulas, 
containing all state formulas, are interpreted over paths. 

Temporal logics with underlying branching time have found many applications in artificial 
intelligence study. In particular, they are very useful in planning systems, where agents 
formulate different plans and action strategies according to different future world states 
[981 [TTB]. 

Since very efficient model checking algorithms have been introduced for branching time 
logics, these logics have been extensively used to verify finite state systems. On the other 
hand, in linear time logics deductive proof systems are introduced for the verification of 
infinite state systems [106] . 

An initial work about branching time logics was done by [2]. Later, the unified branching 
time system (UB) was introduced in [15J. A simple branching time logic, CTL, was intro- 
duced in [37] . Thereafter, CTL* was introduced in |48j . CTL* is an extension over CTL 
by adding the properties of linear time temporal logic. CTL*[P], an extension over CTL*, 
was introduced in |86| . UB, CTL and CTL* include only future time temporal connectives. 
Whereas, CTL*[P] contains both past and future time temporal connectives. 

5.1 Computational Tree Logic (CTL) 

CTL is a point-based branching time logic, which is an extension of the logic UB by adding 
the operator U (until). Time is included implicitly within the temporal operators. CTL 
allows quantification over paths. 

Some CTL formulas are given below [39j: 

• 3(}(p A -ig): There exists a state where p holds but q does not hold. 

• VD(p —7- \/(}q): Whenever p holds, eventually q holds. 

• VD(30p): At all paths p holds after some time. 

CTL is a decidable logic |49j . It can be shown that CTL has the finite model property. 
That is, a satisfiable formula is satisfied in a finite model of size which is bounded by "some 
function of the length of the formula" |45j . |47| presents a tableau method for checking 
the satisfiability of CTL formulas. The complexity of this procedure is EXPTIME. Model 
checking problem of CTL is easier than the satisfiability problem. Indeed, model checking 
in CTL is linear in the size of the model and the formula |38| . This shows that model 
checking in CTL can be achieved very efficiently. In [110J a sound and complete axiomatic 
system is provided for CTL. 

Recently, a quantitative extension of CTL was introduced in |87j . where CTL is extended 
with counting quantification. |87j also provides an analysis of the expressiveness and the 
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complexity of the model-checking problem for a range of quantitative extensions. Depending 
on the extension, different complexity results are obtained. 

5.2 Full Computational Tree Logic (CTL*) 

The logic CTL* was introduced in |48j . CTL* is an extension over CTL by adding the 
properties of linear time temporal logic. That is, CTL* is a logic which unifies CTL and 
LTL. CTL* is a more expressive logic than CTL, which makes theoretical analyses more 
difficult. Although model checking for CTL is linear, CTL* model checking is PSPACE- 
complete [38J. Also, solving the satisfiability problem for CTL* is more difficult than solving 
the CTL satisfiability. |50j provides an algorithm for the satisfiability problem of CTL*, 
which has 2-EXPTIME complexity in the length of the formula. A sound and complete 
axiomatisation for CTL* has recently been defined by Reynolds in |121| . 

5.3 Full Computational Tree Logic with Past (CTL*[P]) 

In the logics CTL and CTL* we assumed that temporal operators are restricted to future 
time. |86| introduces a logic CTL*[P], which also includes past time operators. As in 
the linear case, addition of past operators to the language does not increase expressive 
power if we have a finite past; but this allows to express useful properties. CTL*[P] is a 
decidable logic, which can be easily observed from the decidability of CTL*. Until recently 
the axiomatizability of CTL*[P] has been a long-lasting open question. |122j gives a sound 
and complete axiomatisation system for CTL*[P]. 

5.4 Expressiveness of Branching Temporal Logics 

One of the main reasons of using branching time logics is that the model-checking procedure 
is very efficient. The model checking task is simply to check whether a given a model satisfies 
a specification. CTL language allows to express useful system properties. Although model 
checking is expensive in linear time logics (for example, it is exponential for LTL), model 
checking complexity of CTL is very efficient, which is linear in the size of model and 
formula. However, model checking complexity of CTL* is higher than than of CTL, which 
is PSPACE-complete. The high complexity results from the recursive checking of all paths 

ED. 



The branching logic systems can also be used to specify properties of concurrent programs; 
below are some example properties expressed in UB [110J: 

• VDp: safety property: p is true at all states of each path. 

• \/"(}p: liveness property: p is true at some state of each path. 

• 3(}p: possibility property: p is true at some state of some path. 

Since CTL is an extension of UB, CTL subsumes the language of UB, and it can therefore 
express all properties which are specified in UB. CTL can express more properties such as 
relative ordering of events using the modality U [110J. Both UB and CTL cannot express 



fairness constraints. CTL* has a more rich syntax than UB and CTL. This logic can be 
used in specification of more complex properties, which cannot be expressed either UB and 
CTL. Some examples are given below |110j : 

• DOp — > D0</ : fairness property 

• 'O'Op — > OQq: justice property 

• 3 ( (pUq) V Dp) : weak until property 

As seen above, different combinations of linear time operators result in more expressive 
power. This rich syntax enables to express more complex properties, such as fairness. The 
branching logics mentioned in this section can be made more expressive, while still keeping 
all their formulas as state formulas, by allowing classical operators between the temporal 
and path operators. If we add past operators, expressiveness does not increase; but the 
resulting logic allows more convenient notation to express some useful properties. Due to 
complexity and expressiveness considerations some other logics have been defined, such as 
CTL+ [49], ECTL [47], ECTL+ [47]. 

6 Partial- Order Temporal Logics 

In concurrent systems computations are generally viewed as partially ordered sets. Since 
linear temporal logics are more suitable for totally ordered sets, it is difficult to apply them 
to concurrent and distributed systems [115] , Partial-order temporal logics are suitable to 
express partial orderings representing the behaviour of concurrent systems [111] - Partial 
order structures are similar to branching structures except that each time instant can be 
preceded by several previous time instants. 

Initial attempts to define a logic based on partial orders were done in [111] , where the logic 
POTL is introduced. POTL can express partially ordered computations without making 
any translation from totally orders sets. POTL can be considered as extension of the logic 
UB with past modalities. By adding 'backward' operators POTL allows quantification 
over backward paths, and it can express statements requiring states with several successors 
and predecessors. However, POTL framework is different than that of UB in the sense 
that a UB structure represents the "set of possible computations of a program" (where each 
computation is a totally ordered set); but a POTL structure represents a single computation 
(which is a partially ordered set) [lllj . A POTL formula q — > VOp expresses that for all 
runs and backward fullpaths ending at states where q holds, there is a state where p holds 

m- 

|lllj shows that POTL does not have the finite model property due to the addition of 
past operators; but in spite of this negative result the authors show that the logic has an 
exponential decision procedure, and a complete axiomatisation system. 

|83| introduces the logic POTL[U,S], which extends POTL with 'until' and 'since' opera- 
tors. Similar to the case of POTL, POTL[U,S] can be seen as an extension of CTL with 
past modalities. POTL[U,S] can express all properties POTL can express as well as the 
properties concerning the "relative order of events in the future and past" [110] , 



Since POTL[U,S] is an extension of POTL, it does not have the finite model property. 
However. [83j presents an exponential decision procedure. A sound and complete axioma- 
tisation system for POTL[U,S] is also given in |83j . POTL[U,S] has a high model checking 
complexity, because formulas contain past modalities, and they are "interpreted over models 
corresponding to runs of concurrent systems" |110| . Indeed, |83| shows that the complexity 
is exponential in the model size and doubly exponential in the formulas size. 

In literature, there are more recent results for logics with partial-order semantics. |17j 
presents a new temporal logic, where linear and partial order semantics are combined. 
Namely, a computation is modeled as a linear sequence of states, which are associated with 
"past partial-order history". The authors also give a sound and partially complete proof 
system for the logic. In [65j partial order reductions are studied for the logics CTL and 
CTL* based on the partial order techniques to reduce the state space. [3] introduces a new 
partial-order temporal logic based on different semantical model to increase the expressive- 
ness. In [91J partial-order reduction techniques are applied to linear and branching time 
temporal logics for knowledge (without the next operator) to reduce the model size before 
applying model checking procedure. 



7 Interval Temporal Logics 

Interval temporal logics are temporal logics which allow reason about periods of time. Since 
representation of logical reasoning about periods are more expressive than reasoning about 
points, the interval-based scheme provides us with a richer representation formalism than 
the point-based approach. 

In this section, we present a selection of well-known interval temporal logics. In literature, 
many similar logics can be found; but most of these logics are generalisations or specialisa- 
tions of the ones we will discuss below. 



7.1 Propositional Interval Temporal Logics 

In this section we will present the well-known propositional interval logics, which involve 
unary or binary modal operators, and whose semantic structures are over partial orderings 
with linear interval property, i.e. "orderings in which every interval is linear" [68 J . 



The syntax of propositional interval temporal logics is constructed from the following: the 
set of propositional variables, the truth values, the classical operators (boolean operators, 
negation, etc.), and a set of temporal operators defined for each logic. 

7.1.1 The Logic HS 



The logic HS |74| is a relatively expressive propositional interval temporal logic. All modal 
operators of HS are unary. The logic HS has enough expressive power to distinguish dif- 
ferent temporal structures, such as of discrete, continuous, bound, linear or complete time 
structures. These are formally shown as follows |74j : 

• lengthO = [B]± 
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• lengthl = (B)T A[B]lengthO (lengthl holds at intervals with no proper subintervals.) 

• dense = ^lengthl 

• discrete = lengthO V lengthl V ((B)lengthl A (E)lengthl) 

where (B)cj) is true iff <j) holds at some interval that begins with the current interval and 
ends before it ends; (E)<j> is true iff <f) holds at some interval that begins after the current 
interval starts and ends when it ends; and [B]<p is defined as —i(B)—i^>. 

HS is a quite expressive logic due to its large modal operator set. However, it is not 
axiomatisable and is highly undecidable [74]. The following theorems are taken from [74] : 

• "The validity problem interpreted over any class of ordered structures with an in- 
finitely ascending sequence is r.e.-hard (Thus, in particular, HS is undecidable for 
the class of all (non-strict) models, linear models, discrete linear models, dense linear 
models and unbounded linear models)." 

• "The validity problem interpreted over any class of Dedekind complete ordered struc- 
tures having an infinitely ascending sequence is ni-hard (For instance, the validity in 
any of the orderings of the natural numbers, integers, or reals is not recursively ax- 
iomatisable. Undecidability even occurs in the classes of structures with no infinitely 
ascending sequences)." 

• "The validity problem interpreted over any class of Dedekind complete ordered struc- 
tures having unboundedly ascending sequences is co-r.e.-hard." 

Undecidability results given above are based on the observation that HS formulas encode 
the computation of a Turing machine. In [97] undecidability was proved by means of tiling 
problem. 

In |96] some interesting results for the logic HS were presented. By using a geometrical 
representation for the modalities a sound and complete proof system for HS was introduced. 
|96| also proved that HS is a more expressive logic than any other temporal logic based on 
"linear orderings of time instants". 

In |74) a translation machinery that converts an HS formula to its equivalent first-order 
formula on a corresponding first-order structure was provided. Such a translation is useful 
to reduce problems to well-known results in first-order logic. 

7.1.2 The Logic CDT 

The logic CDT was introduced by Venema in [140] . It is one of the most expressive propo- 
sitional interval logic over linear orderings [68] . CDT includes the binary modal operators 
C, D and T. These operators subsume all unary modalities of propositional interval logics of 
Allen's interval relations [21] . CDT can distinguish different classes of temporal structures, 
such as of discrete, continuous, bound, linear or complete time structures. For example, an 
interval's being discrete can be specified in CDT as follows: 

• (lengthl C T) A (T C lengthl). 
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[140j gives an axiomatic system which is sound and complete for the logic CDT which is 
interpreted over non-strict linear models. This axiomatic system can be extended for the 
classes of discrete linear orderings, dense linear orderings, etc. |68) . Since CDT subsumes 
HS, the satisfiability problem for "CDT is not decidable over almost all classes of linear 
orderings, including discrete, dense, continuous, etc." [68J. 

The partial order semantics of CDT has been recently studied in [66j, where the logic 
BCDT + is introduced. BCDT + uses the language of CDT with partial order semantics of 
linear intervals. To our best knowledge the decidability and axiomatizability of the strict 
versions of CDT and BCDT + are still open. 

7.1.3 The Logic PNL 

Prepositional Neighbourhood Logic (PNL) is the propositional fragment of First-Order 
Neighbourhood Logic introduced in [30| . It has been studied on both strict and non-strict 
linear structures in |67| . The language with non-strict semantics is called PNL 7r+ including 
the modalities r (met by) and (}i (meets), and the model constant tt. The modal operators 
can have either strict or non-strict semantics. 

Assume PNL + denotes the non-strict PNL without the modal constant tt, and PNL - 
denotes the strict PNL without the modal constant tt . The logic PNL"" + subsumes both 
PNL+ and PNL" EH. 



Given that formulas are interpreted over strict linear models, PNL - has enough expressive 
power to distinguish the different classes of linear structures, such as discreteness, continu- 
ity, boundness, or completeness. For example, unboundness and density can be specified 
in PNL - as follows [68]: 

• unbound = □,.</> — > (} r (p 

• dense = (OrOr0 ->■ OrOrOrtfO A (0 r D r (/> -+ r <> r D r <£) 



In |67| several sound and complete axiomatic systems were provided for various classes of 
models. In addition to strict linear models [67] also provides sound and complete axiomatic 
systems for non-strict linear structures, complete unbounded linear structures, unbounded 
structures, dense structures, discrete structures, dense unbounded structures and discrete 
unbounded structures. As for decidability results, |24J shows that the satisfiability problem 
for PNL 7r+ , PNL+ and PNL - over the integers is NEXPTIME-complete. EI] introduces a 
sound and complete tableau algorithm, and shows that it is optimal. In [22] . the expressive 
power of PNL"" + , PNL + and PNL - is compared, and it is shown that PNL 71 "" 1 " is strictly 
more expressive than PNL + and PNL - . |22] proves that "the satisfiability problem for 
PNL 71 "" 1 " over the class of all linear orders, as well as over some natural subclasses of it, 
such as the class of all well-orders and the class of all finite linear orders, can be decided 
in NEXPTIME by reducing it to the satisfiability problem for the two- variable fragment of 
first-order logic over the same classes of structures". 

An important fragment of the PNL is the Right Propositional Neighbourhood Logic (RPNL) 
which is based on the right neighbourhood relation between intervals. The language with 
non-strict semantics is called RPNL 7r+ . The non-strict fragment without the modal con- 
stant tt is denoted by RPNL + , an the strict fragment without the modal constant it is 
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denoted by RPNL~. As for decidability results, in [23j an EXSPACE tableau-based de- 
cision procedure is devised for RPNL~ interpreted over natural numbers. In [25] another 
NEXPTIME decision procedure is developed. This method works for all classes of RPNL, 
which are RPNL 71 "" 1 ", RPNL + , and RPNL - , interpreted over natural numbers. [25] also 
proves the optimality of the decision procedure. 

7.1.4 Subinterval Logics 

For many years, the high computational complexity of interval logics (such as HS and CDT) 
restricted these logics in practical applications and semantic investigation. Recently, the 
trend has shifted to finding expressive decidable fragments. The most important decidable 
fragments are PNL and its fragments, logics of neighbourhood [27], sub-interval and super- 
interval structures |26j . In |26j the logics of subinterval structures over dense linear orders 
is shown to be decidable. |26| also provides a tableau-based decision procedure, which is 
shown to be PSPACE-complete. [102 ] shows that "the satisfiability problem for interval 
logics of the reflexive sub-interval and super-interval relations interpreted over finite linear 
orders is PSPACE-complete". 

Subinterval logics have also been investigated in natural language discourse. In [116] a 
sub-interval logic, which is used in capturing temporal prepositions of a natural language, 
is introduced. In |82j a quantitative extension of this logic is represented. Both logics are 
decidable, and their satisfiability problems are in NEXPTIME. 

7.2 First-Order Interval Temporal Logics 

First-order interval temporal logics were originally defined to formally specify and verify 
hardware components of real-time systems. ITL is the most commonly known first-order 
interval temporal logic. Numerous extensions of ITL, such as Duration Calculus [33j, Neigh- 
bourhood Logic |33| etc., have been introduced. Below we will review well-known first-order 
interval temporal logics. 

7.2.1 The Logic ITL 

ITL was first introduced in [103] (which was "interpreted over discrete linear orderings with 
finite time intervals" |68]). The formulas of ITL are constructed from the following: an 
infinite set of global (independent of time and time intervals) variables, an infinite set of 
temporal variables, an infinite set of global function symbols, an infinite set of predicate 
symbols and an infinite set of temporal propositional letters. 

Not surprisingly ITL is highly undecidable. A sound and complete axiomatic system is 
represented in |44| . |44[ 1104] consider some local variants of ITL, and provide sound and 
complete proof systems for ITL with locality constraint. [72] provides a complete proof 
system for ITL extended with projection. [71] studies probabilistic interval temporal logic. 

7.2.2 The Logic NL 

Although ITL is a very expressive logic, it has a limitation that it does not allow to reason 
about outside of the current interval. The logic NL, proposed in [33], solves this problem. 
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Its left neighbourhood modality <0>; and right neighbourhood modality (} r can allow to look 
outside of the interval. 

NL can express any of the Allen's interval relations; thus, it can represent important prop- 
erties, such as discreteness, density, boundedness, etc; for example, the chop operator C 
can be expressed in terms of the modalities <); and <0> r as follows [68j : 

• 4>C^ = 3x,y{£ = x + y)A 0/0r ((£ = x) A </> A ^ r ((£ = y) A %j>)) 

NL is an undecidable logic like ITL. In [13] a sound and complete axiomatic system is given 
for the logic NL. In |12| up and down modalities, represented by {>„, ^ respectively, were 
introduced, and two dimensional version of NL was proposed. 

7.2.3 The Logic DC 

Duration Calculus (DC) |33j is a first-order interval temporal logic with the additional 
notion of state, which is characterised by a duratiorlQ. DC is an extension of ITL that 
temporal variables other than £ have a state expression structure. The special interval 
variable £ denotes the interval length. 

DC has been used in the specification and verification of various complex systems. As a 
specification example, we specify the real-time requirement of a gas burner system, which 
is "the proportion of leak time in an interval is not more than one-twentieth of the interval, 
if the interval is at least one minute long", which is expressed in DC as follows |33| : 

• Rcq = £ > 60 =>• 20 f Leak < £ 

All axioms and inference rules of ITL can be adopted in DC. However, additional axioms 
are needed for temporal variables. In |31| an axiomatic system for Duration Calculus is 
given. The satisfiability problem for both first-order and propositional DC is shown to be 
undecidable |32|. 



Several fragments of DC have been investigated so far. In |32| a fragment of propositional 
DC, called RDC, was introduced. It was shown that RDC has a decidable satisfiability 
problem when interpreted over N, Q and R. In [117j the satisfiability problems of several 
extensions of RDC were studied . In [56j an extension of RDC was presented on continuous 
time "with a restriction on the finite variability such that the number of discontinuous 
points of any state in any unit interval has a fixed upper bound". In [70j a decidable 
variant of DC was presented, where negation is removed from the syntax; but an iteration 
operator is introduced together with some form of inequalities. In |34j another fragment of 
propositional DC, which can capture Allen's relations [4], was introduced by imposing some 
syntactic restrictions. By proposing a sound, complete and terminating decision algorithm, 
it was shown that the satisfiability problem is decidable. In [107] a logic with quantification 
over states was introduced. It was shown that the satisfiability of formulas is decidable. This 
decision algorithm was implemented as a tool called DCVALID. In |30| Duration Calculus 
and first-order neighbourhood logic were combined, and a axiomatic systems for DC and 



ll 'The duration of a state is the length of the time period during which the system remains in the state" 

EH]. 
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NL were merged. It was proved that "the fragment of DC/NL obtained by restricting the 
formulas" of state expressions is decidable |68j . An extension with formulas with equality 
becomes undecidable. 

Model checking problem for DC is a challenging task. In general, there has not been a 
general model checking technique for this logic. To have efficient model checking techniques, 
it is necessary to consider a fragment of the logic. In [56j some model checking tools 
were developed for a class of models which are restricted to some possible behaviours 
of real-time systems. In |146l l42j I136[ 1137] some techniques were developed to check if 
a timed automaton satisfies a formula of the type "linear duration invariants". In |127| 
some algorithms were developed to check the satisfiability over integer models. In |107) 
a DC validity checker, called DCVALID, to check the satisfiability of formulas which are 
interpreted over discrete-time. [57] suggested bounded validity checking |18| of "a discrete- 
time DC without timing constraints by polynomial-sized reduction to propositional SAT 
solving". In [58| a decidability result and a model-checking algorithm are presented "for a 
rich subset of DC through reductions to first-order logic over the real-closed field and to 
multi-priced timed automata (MPTA)". 

7.2.4 The Logic IDL 

Duration Calculus is a very expressive logic for specifying real-time requirements; but the 
automata theory for DC models is rather primitive and there are no available tools. By 
contrast, the state sequences with time has been widely used in real-time system behaviour 
[8]. The automata theory of timed state sequences have been applied to tools such as Hytec 
[9], Uppaal p], Kronos [20] etc. 

[108j introduced Interval Duration Logic (IDL), which is defined on timed state sequence 
models and incorporates formulas with cumulative amount of time. Due to its expressive 
syntax it can express complex real-time properties, e.g. scheduling and planning constraints. 
As an example, we give a specification example from a gas burner system. The property 
'between two instances of Leak there is at least k seconds' is specified in IDL as follows: 

• \J((\\Leak~}^\\^Leak~}^\\Leak~}°) => £ > k) 

IDL is a very expressive logic; but it is undecidable. However, there are some methods 
which have been proposed for the satisfiability and model checking problems of IDL. |130) 
applies bounded validity checking technique |18j to IDL "by polynomially reducing this to 
checking unsatisfiability of lin-sat formulae". |130| also compares various methods for the 
satisfiability problem "including digitization technique [29], combined with an automata- 
theoretic analysis [107] : digitization technique |29| followed by pure propositional SAT 
solving |57j ; and (c) lin-sat solving |53|". 

[108J presents a decidable subset of IDL, which has a restriction that only located time 
constraints are allowed. The paper shows that the models of this subset can be considered 
as "timed words accepted by a finite state event-recording integrator automaton", which 
implies the satisfiability of the subset. It is also shown that the defined subset and event- 
recording automata have the same expressive power, which makes this logic an important 
decidable subset in the domain of DC. 
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8 Conclusion 

In this survey paper we have outlined recent important developments on propositional/first- 
order linear temporal logics, branching temporal logics, partial-order temporal logics and 
interval temporal logics by presenting important features, such as (un) decidability results, 
expressiveness and axiomatization systems. For a comparison of features of the temporal 
logics we discussed see Table 1. Note that we use the following abbreviations: No*: Unde- 
cidable in general, but decidable for some fragments or specific cases; No**: No deduction 
system in general, but available for some fragments or specific cases; No***: No model 
checking algorithm in general, but available for some fragments or specific cases; Yes*: De- 
cidable for some time domains; Yes**: Available for some time domains; Yes***: Available 
for some time domains. 
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Table 1: A comparison of features of temporal logics. 



-j 



Logic 


Logic Order 


Fund. Entity 


Temp. Struc. 


Metric for Time 


Decidability 


Deductive Sys. 


Model Checking 


LTL 


Prepositional 


Point 


Linear 


No 


Yes 


Yes 


Yes 


PTL 


Propositional 


Point 


Linear 


No 


Yes 


Yes 


Yes 


QTL 


First-order 


Point 


Linear 


No 


No* 


No** 


? 


CTL 


Propositional 


Point 


Branching 


No 


Yes 


Yes 


Yes 


CTL* 


Propositional 


Point 


Branching 


No 


Yes 


Yes 


Yes 


CTL*[P] 


Propositional 


Point 


Branching 


No 


Yes 


Yes 


Yes 


POTL 


Propositional 


Point 


Partial 


No 


Yes 


Yes 


? 


HS 


Propositional 


Interval 


Linear 


No 


No 


No 


No 


CDT 


Propositional 


Interval 


Linear 


No 


No 


Yes 


No 


PNL 


Propositional 


Interval 


Linear 


No 


Yes 


Yes 


No 


ITL 


First-order 


Interval 


Linear 


No 


No 


Yes 


No 


NL 


First-order 


Interval 


Linear 


Yes 


No* 


Yes 


No 


DC 


First-order 


Interval 


Linear 


Yes 


No* 


Yes 


No*** 


IDL 


First-order 


Interval 


Linear 


Yes 


No* 


No 


No*** 
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